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Computer implemented method for protecting electronic files, 
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Access control unit providing method for database management 

system , 

involves utilizing content management system to access user- 
selected 

entities based on resolved privilege rules of run-tim e com piled 
access 

control list table 
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Access control unit providing method for database management 
system , 

involves utilizing content management system to access user- 
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entities based on resolved privilege rules of run-tim e com piled 
access 

control list table 

Alerting Abstract ...a computer network system including a content 
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...manufacture providing a high performance access control list. The 
preferred embodiments operate in a computer network having a plurality 
of users of the network and comprising a database management 
system 

and a content management system controlling access to a plurality of 
entities shareable by the users of the network , the content management 
system using an access control list table having group privilege 
rules and user privilege rules for controlling access to the 
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Having thus described our invention, we now claim : < b> 1 < /b> . I n a 



computer network having a plurality of users of the network and 
comprising a database management system and a content management 

system 

controlling access to a plurality of entities shareable by said users of 

the netw ork , the content management system using an access control 

list (ACL) table having group privilege rules and user privilege 

rules for controlling access to the entities, a method of 

resolving user privileges in the content management system to 

access 

user-selected entities, the method comprising: providing a run-time 
compiled ACL table, the run... 
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from server 
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stipulating 

usage rule corresponding to usage mode of requested content and 

transm its 

it to user term inal 

Patent Assignee: MATSUSHITA DENKI SANGYO KK (MATU); MATSUSHITA 
ELEGTRI 0 

INDCOLTD (MATU); MIURA K (MIUR-I); OHO M (OHOM-I); YAMAMOTO 

M 

(YAMA-I) 

Inventor: DAI HO M; MIURA K; MIURA Y; OHO M; YAMAMOTO M 
Patent Family (5 patents, 36 countries) 
Patent Application 

Number Kind Date Number Kind Date Update 

US 20030028490 A1 20030206 US 2002208039 A 20020731 200339 

B 

WO 2003013141 A1 20030213 WO 2002JP7466 A 20020724 200339 
E 

JP 2003157334 A 20030530 JP 2002214222 A 20020723 200345 E 
EP 1386493 A1 20040204 EP 2002749353 A 20020724 200410 E 

WO 2002JP7466 A 20020724 
CN 1537388 A 20041013 CN 2002814973 A 20020724 200508 E 

Priority Applications (no., kind, date): JP 20012321 17 A 20010731 

Patent Details 

Number Kind Lan Pg Dwg Filing Notes 
US 20030028490 A1 EN 19 8 
WO 2003013141 A1 EN 

National Designated States, Original: CN KR NO SG 

Regional Designated States, Original: AT BE BG CH CY CZ DE DK EE ES Fl FR 

GB GR I E IT LU MC NL PT SE SK TR 
JP 20031 57334 A JA 14 

EP 1386493 A1 EN PCT Application WO 2002JP7466 



Based on OPI patent WO 2003013141 
Regional Designated States, Original: AL AT BE BG CH CY CZ DE DK EE ES Fl 
FR GB GR IE IT LI LT LU LV MO MK NL PT RO SE SI SK TR 

Alerting Abstract ...e.g. video or music to user terminal such as PC or 
mobile phone through network e.g. internet. 



Class Codes 

International Classification (+ Attributes) 
IPC + Level Value Position Status Version 

G06F-001 3/ 00 ... 
... G06F-0021/ 00 ... 

... G06Q-0030/ 00 ... 

... G06Q-0030/ 00 ... 

... G06Q-0050/ 00 ... 

... H04N-0007/ 1 73 
G06F-001 3/ 00 ... 

... G06F-0021/ 00 ... 

... G06Q-0030/ 00 ... 

... G06Q-0030/ GO ... 

... G06Q-0050/ 00 ... 

... H04N-0007/ 1 73 

Original Publication Data by Authority 

Argentina 

Assignee name & address: 
Original Abstracts: 

...the registered information, the content distribution apparatus (1) 
transmits to the user terminal (3) a license stipulating a usage rule 
corresponding to the usage mode of a requested content... 

...modes. During content use processing, based on the registered 
Information, the content distribution apparatus <b>1 </b> transmits to 
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Management-information database structure definition file linking 
method in 

network device management system, involves determining linking 
order, 

from connection relationship of database structure definition files 
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Management-information database structure definition file linking 
method in 

network device management system, involves determining linking 



order, 

from connection relationship of database structure definition files 
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...Method for linking management-information database structure definition 
files, network device management system, and process program for 

linking 

management-information database structure definition files... 

...Method for linking management-information database structure definition 
files, network device management system, and process program for 

linking 

management-information database structure definition files 

Alerting Abstract ... network device management system; and 
management-information database structure definition file linking program 



... USE - For linking management-information database structure 
definition (MIB) files in network device management system (claimed) 
used for managing network devices including personal computer and 

printer 

connected to network. 



...a single MIB file. Allows the user to respond efficiently, when the 
specifications of a network device are changed... 
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<b>1</b>) a method for linking management-information database 
structure 

definition files in a network device management system, the network 
device management sysytem comprising a network device having a 
management-information database and a management device having 
netw ork 

-device management means for managing the network device, wherein the 
management device holds a plurality of management-information database 
structure definition files describing the structure of the 
management-information database, and the network -device management 

means 

manages the management-information database of the network device 
using 

the management-information database structure definition files, andwherein 
the management device performs... 

...1. A computer-implemented method for linking management-information 
database structure definition files in a network device management 
system, the network device management system including a network 
device 

having a management-information database and a management device 



having a 

netw ork -device management device to manage the network device, the 
management device holding a plurality of management-information database 
structure definition files describing the structure of the 
management-information database, and the network -device management 
device 

managing the management-information database of the network device 
using 

the management-information database structure definition files, the 
management device performing a process... 
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Digital content file includes dynamic license database storing 
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controlling operation of file access control mechanism and license 
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... sell their digital content, such as digital 
music, images, video, books and games, over computer networks . To 
protect commercial digital intellectual property and avoid digital 
piracy. Digital Rights 
1 0 Management... 

...core concept in DRM is the use of digital licenses. A license is a 
digital data file that contains content decryption keys and content 
usage rules . 

In DRM , rather than buying content directly, users purchase licenses 
that grant certain rights to the content... 
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the electronic device on the network. 



Furthermore the computer system may comprise a database comprising 
license (Lie.) rules related to the content files . By having a 
database comprising license rules , a content provider will be able 
to control that the license for a specific content have been paid before 
it is sent to an electronic device on the network . Either the database 
can be the same database on where the content is stored or it could be a 
second database separated from the content database . However 
content preferably has a relation to at least one license rule in 
order for the content providers to manage the content. 

The computer system may further... 
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... is used by a child in each home. Since it is 
connected to the communication network 1 60, the child user can 
himself receive a content distributed from the content distribution 
lo... 

...server 1 1 0. However, the child terminal 1 50 which is registered in 
the parental control information database 1 1 4 reproduces a content 
faithfully according to the content usage rule of the child license 
ticket under the usage restrictions set by the parent. This child 
terminal 150 roughly includes... 
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... data content subset including content attribute information, source 
location, data type and cominents; regarding, data content referred to 
by the Intelligent Object, 3 5 regardless of originating data type or 
structure... 

...and selectively directs their content for functional presentation and 
access within a given application or database environment. 

Additionally, the object access manager interacts with external 
object translation engines to detect, define and address required and/or 
available. ..iPools") may be stored locally or may be distributed across 
heterogeneous data storage resources and networks . Components such 
as 



the object standardization technique and the object normalization engine 
standardize and normalize... 

...the interactive user access and presentation method and procedures, the 
unified presentation layer provides the web -enabled graphical user 
interface that integrates the technology defined to unify diverse 
applications, laboratory systems. ..40) architecture and topology. 
FIG. 3 is a diagrammatic representation of a typical multi-user network 
collaborative research effort involving geographically diverse data 
acquisition and query sites. 

FIG. 4 is a. ..database bac[<-ends, mainframe computers and / or cluster 
servers are bundled with functional but inefficient network integration 
software offered by such companies as Oracle, EBM (DiscoveryLink/DB2) 
and 

Compaq (Alpha Systems... 

...security and regulatory compliant validation for management and of 
exchange sensitive biological information over global networks . No 
company provides bytelevel security and access control and few provide 
the guaranteed raw data integrity required to maintain patient 
confidentiality and clinical validation over any network . 

Leading software technology such as IBM's DB2/DiscoveryLink technology 
and Oracle' ...Oracle Corporation, 2001). 

Additionally, only a few companies, such as LabVantage and Telecation 
provide for network -oriented regulatory validation based on 
CDER/CFERJG* P (GLP, cGMP, GCP) compliant data tracking and... 
...Products that integrate global data resources are unable to maintain 
detail data state history over networks to maintain compliance with 
strict laboratory infortnation management (LIMS) protocols. Overall, the 
current lack of... 

...subsets of data content as small as 1 byte may be specified for queries, 
minimize network transfer and processing load and provide faster, more 
meaningful access to terabytes databases. 

<removed unnecessary information> 

State User/level Network Date/time stamp (Explanation) 
000 RAS/05 00220 12/20/2000 14:33:05 (object. ..2042. Additionally, the 
object state engine (OSE) 208 may provide status memory over state-less 
networks by transmitting action consequences back to the backend 
system. 

The object state engine (OSE) 208 also comprises query processing (Query 
Processing) 2032 methods such as handling of network requests ( 



Netw ork 

Request) 2050 and external query submissions (External Submission) 2046 
to the hitelligent Object (11 

40. ..ranking among available components in regard to overall performance, 
such as, but not limited to: network traffic; local processing; remote 
processing; process sharing; distributed processing; direct 
"on-object"-processing; result clustering. ..and/or user-directed 
functional integration of data, applications and instrumentation over a 
variety of network protocols; direct data-to-data interaction; dynamic 
data content presentation within different Intelligent Object property... 
...any scientist or consumer, for that matter, with a computer and a 
connection to the web . As a result, information processing, management 
and storage in every field imaginable (Life Sciences, Agribusiness. ..tool 
companies, which provide proprietary applications and databases; 
Applications Service Providers (ASPs), Portals and other web -enabled 
service providers; and Network Integration Providers, which provide 
network integration of public databases, proprietary data and 
applications as well as support for local/remote... 

- 164 These established companies, have been, in general, committed to 
legacy software, narrowly useful web -based technology, or piecemeal 
component-based integration solutions, which have depended and continue 
to depend... 

...Fast and Secure Data Access and Management; and Scalable and Efficient 
Applications Development Environment. Computer, network , and 
information systems providers may benefit from aspects of the invention. 
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... or service provider for broadcast video, as well as distributor or 
retailer for recorded media. 

Internet Monit 

Application: Content owner or distributor can track use of their content 

over the I nternet 

Watermark Payload: Content ID 

Database: Links content ID to content owner 

Content Filtering 

Application: Content... 



..to asset management system 
Rights Management 



Application: Connecting content outside the DRM back to the DRIVl and 
links to contents usage rules and billing infori-nation 
Watermark Payload: Content ID, and possibly Distributor ID 
Database: Content ID linked to content owner, usage rules, and 
billing information, Distributor ID linked to method of distribution 
Content-as-Portal e-Commerce 

Application: Delivers targeted communications and information across the 
internet associated with content being consumed 
Watermark Payload: Content ID, and possibly Distributor ID 
Database: Content... 
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... excessive and expensive use of system I 00 by the sender. Boolean 
expressions involving attached data files can be used to detect the 
spread of malicious programs and dissemination of confidential information. 
The conditions of a rule , e.g., all condition records 602 of rule 
record 502, are related to one another... 

...intermediate result of boolean operator 906. 

If policy manager 308 (Figure 3) determines that the conditions of the 
subject rule , collectively in accordance with logical relations to one 
another, are not satisfied by the subject... 

...the loop of steps 406 Conversely, if policy manager 308 (Figure 3) 
determines that the conditions of the subject - 1 3 rule , Collectively 
in accordance with logical relations to one another, are satisfied by the 
subject package. ..An action which delays delivery of the package can be 
used, for example, to manage network loads or to schedule release of 
information in which timing of release of the information... 

...illustrative embodiment. For example, an action can notify the sender 
that one or more attached data files were removed from the package 
since malicious computer instructions were detected in those attached 
data files . Similarly, an action can notify the sender that the 
package is blocked pending review for... 
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record and taxonomy management, submission approval, data entity linking, 
and other data administration features. Solis includes e-commerce, rich 
media upload, printing, and Web search components. 365 Media's Directory 
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...Abstract: practice in the Member States will both facilitate and 
constrain economic activity. Information on working conditions , 
standards , health, safety, duties, rights and jobs forms a large body of 
knowledge vital to employers... 

...lexical ventures is designed to automate the application of SGML to 
wordprocessed or DBMS master files , as a means of generating the 
databases we require for online or CD-ROM use, and for printed and 
hypertext versions; and to provide discs for... 
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...and distribute business information, from any 

information source, including databases, documents and the World Wide 
Web. 

Viador presents a single, personalized "portal-like" view to all of this 
information and delivers a comprehensive set of user capabilities on the Web 
-- all built on one open, integrated and scalable architecture that can be 
adapted to meet the individual needs of each enterprise. Enterprise users of 
all skill levels can intuitively access databases and documents through a 
simple, browser-based portal interface with minimal training and support 
requirements . The Viador portal solution combines the best of knowledge 
management , database access and reporting to provide the capabilities 
that companies need most to implement a complete and... 
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UPDATE: Informix intros new data engines 
Byline: Marc Ferranti 
Journal: Network World 
Publication Date: January 19, 1999 
Word Count: 835 Line Count: 83 

Text: 

... that includes the rollout of several new database engines designed to 
link historical information to online transaction processing and 

I nternet applications. Informix also is announcing the availability of 
Informix Visionary, a graphical data analysis and exploration tool for its 
Dynamic Server product. Visionary is designed to let business managers 

directly access databases by using standard graphical tools and 
wizards as well as to graph data. The new database engines are... 

...of product marketing and product management at Informix. To ease the 
flow of data between online transaction processing (OLTP) applications 
and data warehouses -- which hold historical information -- the new 
database products... 

... and ActiveX and OLE DB, from Microsoft. The burgeoning need for 
transaction software to support Web -based commerce is just one factor 
behind the need for smart data federations, according to... 



...s main competition includes Oracle and IBM. The product roadmap includes 
the following: <li> An I nternet data engine code-named Centaur due out 
in 

mid-1999. Centaur, a database engine mainly aimed at OLTP needs, is 
being 

designed to host scalable Internet application development environments 
and will include application server functionality. Centaur will be 
incorporated into a... 

...corporate data -- whether stored in I nformix products or database 
management software from other vendors. Visionary works with 
current 

Informix database products, and through gateways in these products 
can 

access data in databases from things such... 

... nest" a browser -- which would give access to detailed product-sales 
data from an Informix online database -- inside of a top-level view of 
aggregate sales data for a whole quarter... 
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Text: 

...are scrambling to satisfy a surging demand for new features and 
capabilities. 

Object databases, by definition , efficiently store, manage and 
access the complex data types that are the essence of Web applications: 
documents, images, audio and video. And they manage the even more 

complex 

interrelationships among these types, such as the maze of hyperlinks that 
interconnect HTML documents . 

The current generation of relational database management systems are 
ill-suited to handle complex, hierarchical relationships and different data 



types. That., 
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Pleased to m eter you 

NETWORK WORLD TEST ALLIANCE 

These software m eteing applications are the polite way to stay on 
top of 

licensing requirements. 
Byline: Kristin Marks 

Journal: Network World Page Number: 53 
Publication Date: December 11, 1995 
Word Count: 2801 Line Count: 252 

Text: 

Nobody wants to pay for what they don't use, and in the network -building 
business, you've got to budget carefully for what you do use. Software 
metering... 

...based applications with Windows clients - but none work the same way 
because there is no standard architecture for metering yet. A Licensed 
Server API is under development by Novell, Inc. and Microsoft Corp., among 
others. If you want best of breed, have little time and require license 
management for local and network applications, focus your attention on 
Express Meter. It stood above the other products we looked... 
... Server (SMS) for Windows NT or the new platform-independent edition for 
NetWare and other networks . After installing the program, you can forget 
about it for a couple of weeks while it starts auditing application usage 
on your network . As applications are launched, Express Meter adds them 
to 

the library list. You can later... 

... all the data to most standard formats, including the Desktop Management 
Task Force's Management Information File (Ml F), and reset the log 
files to recover space or increase reporting speed. SMS can read Ml F 
files and report on... 

... the release include local metering for Windows applications; a 
preconfigured list of metered applications; Simple Network Management 
Protocol traps; support for the Xbase database format (instead of Btrieve); 
and NetWare Directory... 

... makes some API calls via the NetWare shell, you need to make NetWare 



your primary network client. To define licenses, you click on the Meter 
button, which brings up a dialog... 

... sent with the product; it bears no relationship to what is actually 
installed on your network . To add one of your real applications, you 
click on the Add button and type. ..single applications, except that you 
include all the executables in the suite in the same license definition 
. SiteMeter does not have dynamic suite allocations. In fact, you can't 
define a license for Word alone and then include the same executable as 
part of an Office license definition . Each program file can be 
licensed only once. The lack of single/suite license allocation features 
sets it behind Express Meter... 

... SofTrack works on top of NetWare security, not instead of it. For 
example, you use network operating system groups to specify group 
license 

use instead of setting up separate groups. The... 

... can be up to 20 characters in length. The multiple workstation-type 
boxes in the license profile definition screen let you meter an 
application regardless of the name of its client executable on... 

...as well as Dynamic Link Libraries (DLL) for Windows and Macintosh 
applications. You can meter data files , as well. If you specify the 
complete path, SofTrack tracks who opens and closes that...CentaMeter runs. 
It doesn't matter whether the application to be metered is local or 
network -based as long as the license definition fits. Setting up 
applications to be metered is a two-step process. First, you define... 
...the product. CentaMeter keeps track of license configuration information 
in two separate files for each license definition . Each time you change 
the license definition , you are prompted to flag these files as 
shareable. Without this manual step, metering won... 
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ABSTRACT: 
TEXT: 

...point solutions. 01 P operates seamlessly across both Windows NT and Unix 
platforms; synchronizes and integrates network services server to server 
throughout the Intranet, including Dynamic Host Configuration Protocol 
(DHCP), Domain Name Service (DNS), NIS, Bootp and local host interface; 
creates a unique central database , called the Enterprise IP Knowledge 
Base , that tracks and catalogs all network resources. It also enables 
unattended network management by automatically downloading key data - 

such as moves, adds, changes, and I P address lease updates -- to all 
servers in the enterprise; integrates popular 3rd-party network 
management systems into the global environment, including Cambio 
Networks 

' Command suite and HPOpenView; and delivers easy access to 
management 

functions from standard clients, and includes a secure, customizable Web 
client based on the Netscape Navigator browser. 
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TEXT: 

eye, palm or fingerprint verification. Authorization allows 
verified persons to utilize specific resources, such as data files , 
networks , etc. The rules are stated in the form of access control 
lists. Administration involves maintaining and updating the list of users 
and constantly analyzing their "need... 
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(I nference's new object-oriented development tool for client/ server 
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TEXT: 

...available immediately. The object-oriented development tool for building 
client/server applications integrates data from database management 
system and on - line documents . ART Enterprise features a graphical 
user interface class library and a business rule language and processing 
engine. Development licenses for ART Enterprise for OS/2 are $7,995 and 
include a five-day training... 
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based systems --based on PC, XT or AT, these systems handle less 
than a million documents and use standard database 
m anagem ent 

software and PC-based networks . They start at $50,000 for filing systems 
and $12,000 for retrieval stations. LaserData... 
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are secure. In the worst case, you could find yourself locked out 
of your own files ! 

Database security models 

Certain database management systems, such as Microsoft SQL Server, 
provide standard features for controlling users' access to databases. 
Using stored procedures provided by the system, you can create user 
login 

names and passwords, and grant and... 

...the database level. (The analogy refers to Microsoft LAN Manager's name 
for this typical network operating system login security model.) 
It's even more unlikely for a DBMS to provide... 
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...ABSTRACT: LatiCorp Inc begins recruiting value-added resellers for its 
$695 Textbase 1.2 program, a database -management system for 
electronic 

text . As part of the recruitment effort, LatiCorp is offering resellers 
licensed and standard versions of the program. The licensed version 
allows for a more value-added approach to selling the product. The company 
is... 

...banking and financial fields, and it is proving useful as an add-on sale 

to networked computer systems that are used to manage large databases 

of 

electronic text. 



